News for hackers. Stuff that matters.

A comment on 43M passwords hacked in Last.fm breach. Parent comment

Re:43M passwords hacked in Last.fm breach by fuzzy2 on Friday September 02, 2016 @02:31AM (#12411261)
> Sure, but the breach was in 2012

Even in 2012, storing passwords unsalted (and probably even hashed just once) was considered bad practice. As was MD5.

Bad passwords being bad passwords also goes without saying. 123456 was never a good password.

[ Parent | on HN ]
Re:43M passwords hacked in Last.fm breach by tripzilch on Friday September 02, 2016 @06:32PM (#12416743)
You don't even need a breach to hack 123456, I expect it to be in every pentester's top20 first-tries (contingent on whatever profile they have on the target, obviously).
[ Parent | on HN ]